docs(spec): semver 1.0 compatibility & stability policy (M4 freeze) (… #383

Job	Run time
Step N cleanup watch (informational)	5s
Secret scan (gitleaks)	5s
Planning-doc identifier leak	5s
Dependency vulnerability audit	15s
Absolute path leak	4s
Commit message ASCII check	-1s
	33s

Provide feedback